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Abstract 

In this article we investigate Berlekamp's negacyclic codes and discover that 
these codes, when considered over the integers modulo 4, do not suffer any of 
the restrictions on the minimum distance observed in Berlekamp's original 
papers [1, 0]: our codes have minimim Lee distance at least 2t+l, where the 
generator polynomial of the code has roots a, a^, . . . , a^*"^ for a primitive 
2nth root a of unity in a Galois extension of Z4; no restriction on t is 
imposed. We present an algebraic decoding algorithm for this class of codes 
that corrects any error pattern of Lee weight < t. Our treatment uses 
Grobner bases, the decoding complexity is quadratic in t. 
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1. Introduction 

In his seminal papers 0, 0] , Berlekamp introduced negacyclic codes over 
odd prime fields GF(p), and designed a decoding algorithm that corrects up 
to t < [2^J Lee errors. The main idea in Berlekamp's contribution is to 
represent error patterns of weight w solely by error locator polynomials of 
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degree w, where the error values are encoded essentially in the multiplicity of 
the respective error locations. Berlekamp's error locator polynomial satisfies 
some type of key equation that is solved during the decoding procedure. Its 
solution ultimately depends on the multiplicative invertibility of all odd 
integers i < 2t — 1 in (a field extension of) GF(p) where t is the maximum 
Lee weight of all correctable error patterns. This finally requires t < 
which is the reason why this idea yields only a very small class of useful 
codes. 

The project underlying this article revisits Berlekamp's work and starts 
with the observation that almost all of the algebra used in the quoted papers 
is still valid in a Galois ring, i.e. a Galois extension of the integers modulo 
p™- where m might be greater than 1. The divisibility condition mentioned 
above causes problems if and only if p is odd, and this brought us to the 
idea to study codes over Z2™ . 

The paper at hand considers the simplest (non-trivial) case, namely the 
case where m = 2, which means we consider negacyclic codes over Z4 
under the Lee metric. We will show that a negacyclic code is indeed of 
minimum Lee distance at least 2t + l if its generator polynomial has roots 
a,a^, . . . , q;^*~^ for a primitive 2nth root of unity a in a Galois extension of 
Z4. No restriction on t will be imposed. We present an algebraic decoding 
algorithm for this class of codes that corrects any error pattern of Lee weight 
< t. 

2. Preliminaries 

Throughout this paper, let R denote the Galois ring GR(4, ni) of char- 
acteristic 4, order 4"^, and residue field K = GF(2™'). We let fi : R — > K, 
a a + 2R be the canonical map from R onto K. 

The structure of R is well understood (cf. [7]). Its multiplicative 
group R^ has order 2™(2"^ — 1) and contains a unique cyclic subgroup of 
order 2"^ — 1. This group, in union with zero, forms the so-called Teich- 
muller set of R, which we denote by T. The set T forms a complete set 
of coset representatives of 2R in R and so the image of T under fi is the 
residue field K. Each element a £ R can be expressed in the canonical form 
a := ao + 2ai for suitable ao, ai G T. The automorphism group of R is cyclic 
of order m and with respect to the above canonical form is generated by the 
map 

TT : R — > R , ao + 2ai 1— )• Og -|- laf . 

Note that for an element of T we have Tr(9) = 9^. We remark that R does 
not contain an element of order 4: suppose a = qq + 2ai £ R has order 4 
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where oq, ai S T, then = G T has order 2, which is impossible as the 
order of an element in T must divide 2™ — 1. 

3. Negacyclic Codes Over Z4 

The following is a BCH-like description of negacyclic codes over Z4, 
and can be read as the obvious extension of Berlekamp's work in [3, S]- 
We outline the theory for the convenience of the reader, see [8] for further 
details. 

Definition 1. Let n be a positive integer. A negacyclic code of length n 
over Z4 is an ideal in the ring Z4[x]/(x" + l). 

We will work with roots of a negacyclic code, i.e. elements a G R satisfy- 
ing q" = —1. Note that roots in R exist only if n is odd: if n = 2^ was even 
and a^^ = — 1, then was an element of order 4 in R, which is impossible. 

Henceforth we will assume that n is odd. Then there is a primitive 2nth 
root of unity a in i? such that a" = —1, i.e., a = —(3, where /3 is a primitive 
nth root of unity in R. 

Any Z4-negacyclic code is a principal ideal in Z4[x]/(x"-|-l), in fact it is 
generated by a polynomial of the form a{b + 2) G Z4[x] where + 1 = abc 
and a, b, c are pairwise coprime polynomials, in which case the code has size 
^5c2(5fe -^^i^ere 5f denotes the degree of the polynomial / (cf. [8, Th. 2.7]). 
There is a natural correspondence between negacyclic and cyclic codes over 
Z4. This is given by the map 

A : Z4[a;]/(x"-l) — > Z4[x]/(x" + l) , a{x) ^ a{-x) . 

Clearly, A is ring isomorphism, from which it follows that any ideal C in 
Z^lx]/ {x'"- — 1) is mapped to an ideal A(C) of Z4[x]/{x'"' + l). Moreover, A is 
an isometry with respect to the Lee distance, since for every c = cq + cix + 
• • • + Cn-ix"'~^ € Z^lx] / {x"' — 1) , we have A(c) = cq — cix it • • • + c„_ix"~^ 
which is obviously of the same Lee weight as c. 

Theorem 2. Let C be a negacyclic code over Z4 of odd length n whose 
generator polynomial g has the roots a, a^, a^^~^ for some primitive 
2nth root of unity a (z R such that = —1. Then C has minimum Lee 
distance di^ee o,t least 2t+l. 

Proof. Let D be the pre-image of C under A. Then D is a cyclic code of 
length n, with generator polynomial / satisfying A(/) = g (z TLi\x\. Then / 
has the roots /3, /3^, . . . , ff'^~^ where /3 = — q is a primitive nth root of unity 
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Table 1: Parameters of negacyclic codes of length n, designed error-correcting capability 
t, and rank k (i.e., size 4 ). 
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in R. Now / E Z4[x] is fixed by the automorphism tt, so that = Tr{f{9)) = 
/(7r(^)) for any root of / in R. Since /3 is contained in the Teichmiiller set 
of R, f also has the roots 7r^ (/3*) = /3^'' for z G {1, 3 . . . , 2t - 1}. Therefore, 
/ has the 2t consecutive roots /3,j3'^,... ,/3^*. Therefore a generahzation of 
the well-known BCH bound (see for example Q, Th. IV. 1]) shows that D 
has minimum Hamming distance at least 2t-|-l. This gives a trivial lower 
bound on the minimum Lee distance of D. The claim now follows from the 
above isometry observation. □ 

Remark 3. The lower bound on the Lee distance of negacyclic codes given 
in Theorem [2] is in general not sharp. Indeed there are codes C with c^Lee > 
2t + l, as Table [3] shows. If the actual Lee distance is at least 2r + l with 
r > t we will see in the next section that the key equation carries sufficient 
information to determine all error pattern of Lee weight at most r, thus 
being able to correct up to r errors. We will then present a concrete decoding 
algorithm for error patterns up to Lee weight t. 

4. The key equation 

Let C be a negacyclic code with roots a, a^, . . . , a^*~^ and minimum Lee 
distance ^Lee > 2r-|-l. Let v G ^4(2;] be a received word satisfying d{v, C) < r. 
We will design a decoder to retrieve the unique error polynomial e satisfying 
e = V — c for some codeword c, where e has Lee weight at most r. Most 
of what follows will be reminiscent of the according steps in Berlekamp's 
papers 0,0]. We will amend the methods from those sources to the situation 
at hand. 
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Let w denote the Lee weight. We define the error locator polynomial 

n-l 

a = - Xizr^'^') e Rlz] , (1) 



i=0 



where X, = if = 0, Xi = a' if a G {1,2}, and Xi = -a' = a^+" if 
Ci = 3. For each positive integer k, we let denote the sum of the kth 
powers of the reciprocals of the roots of a, including repeated roots, i.e. 



n-l 



Sk = ^w{ej)Xf , k>l. 

j=0 

We note that w{ej)Xj = eja^^ holds for all odd k. Hence, for each k € 
{1, 3, . . . , 2t — 1}, the A:th syndrome Sk = e(a'^) = v{a^) is known to the 
decoder. Let s denote the power series YlT=i ^k^^ G R{z). We have 



n-l 



■ 11(1 - (1 - 

j=0 ij^j 



and thus 



za'iz) = -z^Ui^-X^zr^^^^f^ = -a{z)Y,w{e,)Y,{X,zf 

j=0 i=0 ^ j=0 k=l 



Therefore 



k=l j=0 k=l 

sa + za' = , 



where the coefficients si, S3, . . . , S2t-i are known to the decoder. For any 
power series P{z) = Y^^=o ^kZ^ G R{z) we denote the even part and the 
odd part by Pe = Yjj>oP'ijz'^^ and Po = Yjj>QP2j+iz'^^^^ , respectively. 
Then the even part and the odd part of equation ^ read 

SeO-e + SoCTo + z[a e)' = , (3) 
SeO-Q + SoCTe + z{ao)' = . (4) 

Subtracting a^. times equation ^ from Oq times equation ([3]) results in the 
equation 

So{ol - al) + z{{ae)'oo - (To)Ve) = , (5) 
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which involves only the odd part of s, the latter being known modulo z . 
Now let u = ^ G Riz) and rewrite equation ([5]) to obtain 

Soiu^ — 1) = zu' , (6) 

from which we can recursively compute the coefficients «i, W3, W5, . . . U2t-i 
via the equations 



Ul 

Us 
U5 



-si 

-S3 + ujsi 
3 

-S5 + nfs3 + 2uiU3Sl 



The reader should notice that this is the point where Berlekamp's original 
approach can continue only by imposing a severe restriction on t. In our 
situation however all the above denominators are invertible in R. 

Clearly, u is an odd function and so we may define the power series T 

by 

T{z') = il + zu{z)r'-l. (7) 

Moreover, the coefficients Ti, . . . ,Tj are all known to the decoder. Next, we 
define the polynomials ip,uj £ R[z] by the equations 

u}{z'^) = ae{z) , and ^{z^) = cre{z) + z(To{z) . (8) 

Noting that 1 + T{z'^) = ^ '^^^ we finally arrive at a key equation: 

{l + T)ip = u: mod , (9) 

which is the main task of the decoder to solve. 

Knowledge of 99 and u is sufficient to recover the error locations along 
with their multiplicities. Using equation ([8j) we may obtain a. The decoder 
could run through the 2n roots of unity 1, a, ... , a^"~^ and determine the 
error polynomial e by 
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This is easy to see since for each jG{0,...,n — 1}, we have 

a(a-^'+") = 5 JJ(1 ± a^-^T^'^^) 

where 7 = (1 T l)'"^''^) / if and only if ej G {0,3}, 6 = {1 ± / if 

and only if ej € {0, 1}, and 1 ± a'"-' is a unit whenever i ^ j. 

Now we will show that the key equation carries sufficient information to 
determine any error pattern of Lee weight at most r. Let -6(0, r) denote the 
ball in centered in with radius r, and let a : -6(0, r) — ?■ R[z] be the 
function e 1— )• o", mapping an error pattern to its error locator polynomial 
(see equation ([T])). Then we consider the function 

f : a{B{0,r)) ^ R\ a ^ {Ti, . . . ,Tt) , 

where the coefficients Ti, . . . ,Tf of the power series T are obtained as out- 
lined above (see equations Q and d?])). 

Lemma 4. The map f : a ^ (Ti, . . . ,Tt) is injective on a{B{0,r)). 

Proof. Consider the syndrome map Z4 R^, v 1-^ (si, S3, . . . , S2t-i), with 
Sk = v{a''). It kernel equals the code C of Lee distance at least 2r + l, 
hence the map is injective on -6(0, r). Now we observe that the mappings 
(si, . . . , S2t-i) H> {ui,. . . , U2t-i) ^ (Ti, . . . , Tt) of equations dH) and ^ are 
bijective. □ 

Proposition 5. Let S := R[z]/{z^+^). For any T = YlUi^iZi G S there 
is at most one error locator polynomial a € a(-B(0, r)) such that the corre- 
sponding key equation {1 +T) ip = lo in S is satisfied, where w(z^) = ae{z) 
and ip{z'^) = cre{z) + zao{z). 

Proof. Suppose that a € a{B{0, r)) satisfies (l + T) if = uj. Now 5 is a local 
ring with maximal ideal (z), and as ct(0) = 1 we have (/'(O) = ^i^) — 1) so 
that If and uj are units in S. This implies 1 + T = wy?"^, in particular, T 
is uniquely determined by the key equation. As also f{a) satisfies the key 
equation by construction we have thus T = f{a). Since / is injective, it 
must hold a = f^^{T), and a is hence uniquely determined. □ 

In the view of Proposition [5] it remains an open problem to find the 
unique solution of the key equation efficiently. In the following we assume 
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that e has Lee weight at most t, and we present an efficient decoding method 
for this case. 

For the classical finite field case, there is a unique pair of coprime poly- 
nomials [a, 6] G GF(p™)[z]^ satisfying the key equation ([9]) along with the 
constraints: 

a(0) = 6(0) = 1 , < , (56 < I . (10) 

For the Galois ring case, it is apparent that the required solution pair 
[(p,io] satisfies the constraints pop . Although (p and lo are not necessarily 
coprime in R[z], we will show in the next section that 2 € i?[2:](/9 + i?[2:]Li;. 
Now over the ring R, a solution [a, b] of the key equation Q satisfying 
2 € i?[2;]a + i?[z]6 and the constraints (jlOp will still not be unique in general, 
but the modulo 2 solution [fj,a, ^b] G K[z] is unique, which will be sufficient 
for the decoding problem. 

5. The Ideal Generated by ip and u 

We will show that 2 can be expressed as a i?[z]-linear combination of ip 
and w. First we note some useful observations. 

Let S" be a commutative ring with identity 1. For f,g £ S we use the 
notation {f,g) := Sf + Sg to denote the ideal generated by / and g in S. 

Lemma 6. Let f,g,h € S. Then 

(a) if,g) = {f,hf+g), 

(b) {h,g)=S implies {f,g) = {hf,g). 

Proof. We will only prove the inclusion {f,g) C {hf,g) in (b). Since {h,g) = 
S there are a,b £ S such that ah + bg = 1, and consequently ahf + bgf = f. 
Now, for all r, s £ S we have 

rf + sg = r{ahf + bgf) + sg = {ra)hf + {rbf + s)g . □ 

Lemma 7. Let a,b,u,v G 5 and let f = a + b, g = u + v. Suppose that 

26 = 0, {f,g) = S, and {g,u) = S . 

Then {fg,au+bv) = {f,a). 

Proof. First we observe au + bv = au — bv = ag — fv. Next, using Lemma El 
we obtain {g,ag — fv) = {g,fv) = {g,v) = {g,u) = S. Hence, again using 
Lemma [U 

ifg, au+bv) = {fg, ag-fv) = (/, ag-fv) = (/, ag) = (/, a) . □ 
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We now specialize to the case that S = R[z] where i? is a Galois ring 
with residual field K. The following is well-known. 

Lemma 8. Let f,g be polynomials in R[z], then {f,g) = R[z] if and only if 
{^^f,^J'9) = K[z]. 

Consider the polynomial 

r 

:= 11(1 - Yizf^ G R[z] , 

i=l 

for some Oj G {1,2} and Yi € R such that the fjYi G are pairwise 
distinct. We further let 

s r 

T = - YiZ? and e = n - ^*^) 

i=l i=s+l 

be the square and non-square part of S (under a suitable re-ordering of 
the Yi if necessary). As before, we denote the even and the odd part of a 
polynomial / G R[z\ by fe and fo, respectively. 

Lemma 9. Given the above notation, there holds 2to = 0, (t, e) = R[z\, 
and (e, Cg) = R[z\. 

Proof. Since r is a square, we have fir = UTe- Thus fiTo = and hence 
2to = 0. Since /ir and fie have no common factors, we have (//r, ^e) = K[z], 
and so, by Lemma [HI we have (r, e) = R[z] . 

To show {e,ee) = R[z] we simply show that fiSe and fi£o are coprime. 
First we note /iee(O) = ^e(O) = 1, and hence z is not a common factor of fiSo 
and fiEe- Suppose now that a (proper) common factor of /i£e and exists. 
Since both fiSe and fj,£o/z are squares the fact that they have a common 
factor means they have a common factor that is also a square, contradicting 
the fact that fie is square-free. Thus fiSe and fiSo are coprime, and hence, 
by Lemma m (e,ee) = (^ei^o) = R[z]- □ 

Corollary 10. (S, S^) = (r,T,). 

Proof. We observe that Sg = Teee+ToEo- Combining Lemma[7]and LemmaO 

we obtain (S,Se) = {Te,Te£e + To£o) = (t, Tg). □ 

Lemma 11. Let f,g(z R[z] be squares. Then {fg)e = fede- 

Proof. We have {fg)e = fe9e + fodo- Since / and g are squares, as in the 
proof of Lemma m it follows that 2fo = 2go = 0, and hence fogo = 0. □ 
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Corollary 12. = J] -=1(1 + Y?^^)- 

With these preparations we can prove: 
Proposition 13. 2 e {T.e,T.o). 

Proof. Observe first that (He, So) = (S,Se) and (t, Tg) = (r, Tq). Then by 
Corollary [TU] it suffices to show that 2 € (r, Tq). Since 2to = we may write 
To = 2/9 for some regular polynomial p € 

We show that {pT,pp) = K[z]. Clearly, the polynomial fully splits 
into linear factors over K; its roots are A*^~^; j = 1 . . . s. On the other hand 
we show that for all j we have p,p{pY~^) ^ 0. Using Corollary [T2] we find 
that 

s 

since p{l + y.yri) ^ for i / j. Hence, ro(yri) = r(yri) _ TeiYf^) = 
—TeiY^^) 7^ 0, and this implies pp{p,Yj'^) ^ 0. 

Now, since {fir, fip) = K[z] there are a,b G K[z] such that a fiT+b pp = 1. 
Choose a,b (z R[z] with pa = a, pb = b. Then ar + bp = 1 + 6 for some 
6 G 2R[z], and thus 2aT + 2bp = 2. This proves that 2 G (r, 2p) = (r. To). □ 

Corollary 14. 2 G {(p,uj). 

Proof. It is clear that a has the same form as S, defined before, and thus 
2 G ((To,<Te). Moreover 

((^(z^), ^(z^)) = (o-e(z) + ZfTo(z),0-e(z)) = (zfTo(z) , fJe (z)) = (o-o,(Te) , 

since {z,ae) = R[z]. As 2 G (o"o,o-e) there exist a,b G such that 

aip{z'^) + buj{z'^) = 2. It follows ae'^{z'^) + beUj{z'^) = 2. Therefore we have 
Uif + vuj = 2 with u,v G R[z] such that u{z'^) = Oe and v{z'^) = be- □ 

Remark 15. Suppose that no 'double-errors' occurred, i.e., there is no po- 
sition j with Cj = 2. Then we have r = 1, and by Corollarv IIO) we have 
(a, (Te) = (t, Te) = R[z]. From this it follows {<^,oj) = R[z], as before. 

6. The Solution Module of the Key Equation 

In this section we investigate the module of solutions to the key equa- 
tion dH), M = {[a,b] G R[z]'^ \ a{l + T) = b mod First we recaU 
some basic facts on Grobner basis in i?[2:]^, further details can be found in 

UMM- 
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Definition 16. Let £ be an integer. We define a term order on R[z^ by 

(a) [z\Q] <i {z\^\ and [0, z'\ <t [0, z^\ for i < j, 

(b) [0, z^ <i [z\ 0] if and only iij<i + £. 

Let < denote an arbitrary fixed term order. Let [a, b] S i2[2:]^\{0}. Tlien 
[a, b] has a unique expression as a sum of monomials [a, b] = '^«[-^*' 0] + 
J (ij[0, x-'] for some finite index sets I, J of nonnegative integers, and 
elements Cj, dj € i?\ {0}. The leading term, lt[a, b], of [a, b] is then identified 
as the greatest term occurring in the above sum with respect to <. The 
leading coefficient, denoted lc[a,b], is the coefficient attached to lt[a, 6] and 
the leading monomial is lm[a, 6] = lc[a, 6]lt[o, 6]. For any [a,b], [c,d] G Riz]"^ 
we say that [a,b] ^ [c,d] if and only if It [a, 6] < It [c,(i]. Given a set of 
non-zero elements of R[z]'^ there exists in the set a (not necessarily unique) 
minimal element with respect to the quasi-order ^ associated with <. We 
will refer to this element as being minimal with respect to <. 

We say that lt[a, 6] is on the left (resp. right) if lt[a,6] = [z^,0] (resp. 
It [a, 6] = [0, z*]) for some non- negative integer i. A subset ;S of a submod- 
ule A of R[z]'^ is called Grobner basis, if for all a G ^4 there exists /S G B 
such that lm(/3) divides lm(a). The structure of a Grobner basis in R[z]'^ is 
given by the following lemma (cf. [4, Th. V.3]). 

Lemma 17. Let A be a submodule of R[zY ■ Suppose that A has elements 
with leading terms on the left and elements with leading terms on the right. 
Then A has a (not necessarily minimal) Grobner basis of the form 

{[a,b], [c,d], [g,h], [u,v\] 

with \m[a,b] = [z\0], \m[c,d] = [2z^ lm[g,h] = [0,2*^], \m[u,v] = [0, 2z^] 
satisfying i > j and r > s. Moreover, the integers i,j,r,s are uniquely 
determined. 

In 0, Sec. VI] an efficient algorithm to compute a Grobner basis for a 
submodule M of the form M = {[a,b] € R[z]'^ \ aU = b mod z'^}, for some 
U € R[z] is given, the so-called method of Solution by Approximations. 
This algorithm generalizes one for the finite field case, derived in which 
can be viewed as the Grobner basis equivalent of the Berlekamp-Massey 
algorithm [sl, Alg. 7.4]. The Solution by Approximations method works by 
computing iteratively a Grobner basis of each successive solution module 
M^'^) = {[a, b] S Rlz]"^ \ aU = b mod z^}, finally arriving at a basis of M = 
jVf (''). The algorithm requires no searching at any stage of its implementation 
and has complexity quadratic in r. 
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We describe this method below, which is particularly simple for the case 
of the Galois ring R of characteristic 4. As we said before, the algorithm 
works by computing iteratively a Grobner basis of each successive solution 
module M^'^) = {[a, b] € Riz]"^ \ aU = b mod z'^}, finally arriving at a basis 
of M = M^^). Then, the algorithm is basically a method to give the basis 
Sk+i = {[f{,9'i\, • • • , [fi,94\} knowing the basis Bk = {[fi,9i], [f4.,9i\}- 

For a, f3 € R we say that a is a multiple of (3 if there exists x £ R such 
that a = xf3. This holds precisely when /3 G R^ or a, /3 € 2i?, /3 7^ 0. 

Algorithm 1 (The Method of Solution by Approximations). 
Input: [/ e r € N 

Output: A Grobner basis as in Lemma [7^ of the solution module M = 
{[a, b] G \aU = b mod 2^}. 

1. Lei := {[1,0], [2,0], [0,1], [0,2]} be the initial basis of M^^h 

2. For each [fi,9i] G B^, compute the k^^ discrepancies Q = [fill — g-ilf^, 
where [•]fc denotes the kth polynomial coefficient. 

3. For each [fi,gi] G Bk, obtain an element [fl,9'j] G Bk+i as follows. 

(a) If = then [fi,g^ ■.= [fi,9i]- 

(b) IfCiT^O and there is some [fj,gj] G B^ with lt[fj,gj] <i \i\fi,9^ 
such that Q is a multiple of Q then 

[fi,9'i\ ■■= [ft,9i] -x[fj,9j] , 

where Q = xQj (if Qj G R* we take x = dCj^ > f^f^d if Cj = 2ej ^ 0, 
d = 2ei we take x = EieJ^). 

(c) Otherwise, let [//,5'^] := [zfi,zgi]. 

4. Repeat Steps 2 and 3 for A; = 0, . . . , r — 1. 

5. Output Br- 

Example 1. Let R = GR(4,2) = Z^lx]/ (x'^+x+l) and let a = [x] G R. We 
use AlgorithmUl to find a Grobner basis of 

M = {[a,b] G R[zf I a((3a+3)z+l) = b mod z^} 

with respect to the term order <£ = <-i. Hence, U = (3a + 3)2; + 1. 
The initial ordered basis of M^^^ is 

^0 = {[1,0], [2,0], [0, 1],[0,2]} . 

We compute the discrepancy for every element in Bq and find [1,2,3,1]. 
Now, as [1,0] <e [0,1] we get [0,1] — y[1,0] = [1,1] as a new basis element. 
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Similarly, as [1,0] <e [0,2] we get [0,2] - f[l,0] = [2,2]. From [1,0] and 
[2,0] we further get [z,0] and [2z,0]. So, the new basis is, after reordering, 

Si = {[l,l],[2,2],[z,0],[2z,0]}. 

Now, the new discrepancies are [3q + 3, 2a + 2, 1, 2]. As [1,1] <i [z,0] and 
[1,1] <e [22;, 0] we get new basis elements [z,0] — ^^^[1,1] = [z + 3a, 3a] 
and [2z, 0] — [1, 1] = [2-2 + 2a, 2a], and from [1,1] and [2,2] we get [z,z] 
and [2z, 2z]. Thus finally, the founded basis is 

B2 = {[z+3a,3a], [2z+2a,2a], [z,z], [2z,2z]} . 

In the next result we establish the minimality of [99, u] among the regular 
elements of the solution module of the key equation ([9]) with respect to the 
term order <-i. 

Theorem 18. Let M = {[a,b] G R[z]'^ \ a(l + T) = b mod Let 
[a,b] € M such that 5a < Sb < |, and 2 G {a,b). Suppose further that 
lc(a) G i?^ if 5a > Sb and lc{b) G i?^ if 5a < 5b. 

(a) Then [a,b] is minimal in M\Mr\2R[z]'^ with respect to the term order 
<_i. Moreover, if [a',b'] is minimal in M\M Cl 2R[z]'^ then [j^a, fib] = 
i^lfia' , fib'] for some v ^ . 

(b) // in addition (a, b) = R[z] holds, then [a, b] is minimal in M \ {0} with 
respect to the term order <_i, and if [a', b'] is minimal in M\Mr\2R[z\^ 
then [a, b] = 9[a', b'] for some 9 e R^ . 

Proof Let [u,v] G M \ {0} satisfy lt[u,v] <i lt[a,b] for i = -1. We will 
prove [u,v] G M n 2i?[z]^. We have ub = av mod z*"''^ and first we will 
establish equality in R[z]. 
Case 1: It [a, 6] = [z^'^,0]. 

If lt[u, v] = [z^^,0] then 5u < 5a and 5v < 5u + i, hence 5v < 5a + £. 
If \t[u, v] = [0, z^""] then 5u + £ < 5v and 5v < 5a + I, hence 5u < 5a. 
We obtain 

5u + 5b < 5a + 5b <t and 5a + 5v <25a + (. <t + 1 + £ . 
Case 2: It [a, 6] = [Q,z^% 

If \t[u, v] = [z^", 0] then 5u + £ <5b and 5v <5u + £, hence 5v < 5b. 
If lt[ti, v] = [0, z^''] then 5u + £ < 5v and 5v < 5b, hence 5u + £ < 5b. 
We obtain 

5u + 5b < 25b - £ <t - £ and 5a + 5v < 5a + 5b < t . 
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For i = —1 we get 6{ub) < t and 5(av) < t in all cases and therefore 
ub = av in R[z]. 

Since 2 G (a, &), there exist f,g G R[z] such that af + hg = 2. Then 
a[fu + gv) = 2u and b{fu + g'u) = 2t;. Suppose that fu + gvj^ 0. Then, 
in Case 1 we have 6a > 6b, thus lc(o) G i?^ by assumption, and we get 
6a < 6{a{fu + gv)) = 6{2u) < 6u, contradicting 6u < 6a. Similarly, in 
Case 2 we have 6a < 6b, thus lc(6) G , and we get 6b < 6{b{fu + gv) = 
6{2v) < 6v, contradicting 6v < 6b. Therefore, we have fu + gv = and 
hence 2u = 2v = 0. It follows [u, v] e M n 2R[z]'^ , as desired. 

(a) The above shows that [a,b] in minimal in M \ M n 2R[z]'^. Now 
suppose there exists [a',b'] G M \ M n 2R[z]^ such that lt[a',6'] = lt[a,b]. 
We note that 



and thus lc[a,6] is a unit. Hence there exist 9 G R such that [a',b'] = 
9[a,b] + [r,s] and lt[r, s] < lt[a,6]. From the minimality of [a,b] we deduce 
that [r,s] G M n 2i?[z]^, and so [fia',fib'] = fj,6[fj,a, fib]. Since [fia',fj,b'] ^ 
we have [iQ ^ 0, and hence v = fiO G and 9 G R^ . 

(b) Since (a, 6) = R[z] there exist f,g G R[z] such that af + bg = 1. 
Let [tt,f] G M\ {0} satisfy lt[n, <_i lt[a,6] and consider the above proof. 
We get a{fu + gv) = u and b[fu + gv) = v, and as before we can prove 
fu + gv = 0. Hence u = v = 0, and hence [a, b] is minimal in M \ {0}. Now 
suppose there exists [a',b'] G M\M n 2R[z]'^ such that It [a', 6'] = It [a, 6]. 
As shown in (a) there exist 9 G R^ such that [a',b'] = 9[a,b] + [r,s] and 
lt[r, s] < It [a, b]. Now from the minimality of [a, b] we deduce [r, s] = 0. □ 

Corollary 19. Let M = {[a,b] G Rlz]"^ \ a{l + T) = b mod 2*+^}, and let 
[a',b'] be the minimal regular element of a Grobner basis of M . 

(a) Then [fiip,fiuj] = I'lfia' , fib'] for some u G . 

(b) If e contains no 'double-errors', then [92,0;] = 9[a' ,b'] for some 9 G R^ . 

Proof. Let w := w{e) = 6a < t he the number of errors occurred. If w is 
odd, then 6ip = and 6oj < hence 6ip > 6uj; and lc((/?) G i?^. If 

w is even, then 6ijJ = ^ and < ^, hence 6ip < 6io; and 1c((jj) G i?^. 
By Corollarv we have 2 G {^p,oo). So we can apply Theorem 1181 with 
Remark [T5j □ 

We note that since f^(0) = 93(0) = 1 we may choose [a', 6'] such that 
a'(0) = 6'(0) = 1, and then we have [fjiip,fioj] = [fjLa',fib'] and [<^,uj] = [a' ,b'], 
respectively. 




lc(a) G R"" if 6a > 6b 
lc(6) G i?^ if 5a < (56 
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7. Decoding Z4-linear Negacyclic Codes 

Let the Z4-linear negacyclic code C be given as in the previous sections, 
and let f,c, e G 1^i[z\, a,ao,cre,(p,i^ S R[z] and T e R{z) be given as before. 
In particular, v = c + e with c € C and the error vector e is of Lee weight 
at most t. Let M = {[a,b] G R[z] \ a{l + T) = b mod 2*+^} be the 
module of solutions to the key equation @. We first compute a Grobner 
basis of M relative to the term order <_i, which contains an element [a, b] 
such that fia = fj,ip and fj,b = fioj. Then fiip, fiuj can be used to determine 
^cr = nr=o^(l - ^^i^)""^^^^ e K[z] via the equations 

= fiae + fJ'O'o , fJ'O'eiz) = fiu}{z'^) , and ^Lp{z'^) = ^ae{z) + z^adz) . 

Knowledge of ficr is not sufficient to recover the error pattern e, as errors 
of the form Cj = ±1 cannot be distinguished. However, by examining the 
roots of /ifj we find all error positions, and by examining the double roots 
we get all locations j where Cj = 2 (i.e., the 'double-errors'). 

Let G be defined hy ej = 2 if ej = 2 and e| = otherwise. Note 
that e"^ is completely determined by the roots of fia. Now consider the word 
v' := v — e^ = c + e' with e' := e — e^. Then e' does not contain double-errors 
and has Lee weight at most t. Then, using Corollary [191 the error pattern e' 
can be found by computing the minimal regular element of a Grobner basis. 

We outline the steps of the algorithm below. 

Algorithm 2 (Algebraic Decoding of Z4 Negacyclic Codes). Let C be a 

negacyclic code over Z4 of length n, whose generator polynomial has roots 
a, a^, . . . , a^*^"*^ for a primitive 2nth root of unity a G R such that a" = —1. 

Input: V € Z4[z] such that d{v,C) < t 
Output: c & C such that w{v — c) < t 

1. Compute the syndromes Sk ■= v{a^) for A; = 1, 3, ... , 2t — 1. 

2. Compute the coefficients using equation ^ for k = 1,3, . . . , 2t — l. 
Let u := Yl'kZi UkZ^. 

3. Compute T{z) mod z*^^ from u using equation 

4. Obtain a solution [g,h] G R[z\^ of the key equation a(l + T) = b 
mod z*"*"^ satisfying the hypothesis of Theorem\18[ One way to do this 
is to identify the minimal regular element of a Grobner basis of the 
solution module M, relative to the term order <_i. 

5. Compute fJ-a{z) = fJ-Ceiz) + fJ-ao{z) := fih{z'^) + z~^{pLg{z'^) — fih{z'^)). 

6. Evaluate fia{fia~^) for j = 0, . . . ,n — l. 
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• If fia~^ is a double root of fj,a then ej = 2. 

• If fia~^ is a single root of fia then ej G {il}- 

7. Let e^ := I]i,e3=2 '^^^ > v' := v - . 

8. Repeat Steps 1.-4- with v' in place of v, and compute (t'{z) = (t'^{z) + 

a',{z):=h{z^) + z-^{g{z^)-h{z^)). 

9. Compute e' by evaluating a{a^^) and (T{a~^~^'^) for j = 0, . . . ,n — l. 

• If a^-' is a root of a then e'- = 1. 

• If a"^^"^ is a root of a then e'j = 3. 
10. Output c := v' — e! . 

We will conclude our work by a concrete example. 

Example 2. LetR = GR(4,4) = Z4[x]/{x^+2x^+3x+l) and leta = [x] G R. 

We use a code of length n = 15 with t = 2. Let the received word be 
V = 2 + z + ?,z^ + 2z'^ + z^ + 2z^ + 3^7 + ^8 _^ 3^9 _^ _^ 3_^i3_ 

1. The list of syndromes is [3a^ + + 3a + 2, 2a^ + + 2a + 1]. 

3. The T polynomial of the key equation is T{z) = (2a^ + a^ + a)z'^ + 
(3a3 + a2 + 3a + 2)z + 1. 

4. The solution of the key equation is [{a^ + 2a^ + 3a + 3)2; + 3a^ + 3a^ + 
2a + 3, 2 + 3a^ + Sa^ + 2a + 3)] G R[z]'^. 

7. We find e^ = 0. 

9. Repeating the process with v' = v we find e' = — z^^ and c = v' — e' . 
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